<!DOCTYPE html><html lang="zh-CN" data-theme="light"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><title>Wireshark Lab: NAT v7.0 | A君的秘密基地</title><meta name="keywords" content="Wireshark Lab"><meta name="author" content="astralcon"><meta name="copyright" content="astralcon"><meta name="format-detection" content="telephone=no"><meta name="theme-color" content="#ffffff"><meta name="description" content="# 实验文件地址 Wireshark Lab: NAT v7.0 NAT Measurement Scenario Question &amp; AnswerWhat is the IP address of the client? The client actually communicates with several different Google servers in order to">
<meta property="og:type" content="article">
<meta property="og:title" content="Wireshark Lab: NAT v7.0">
<meta property="og:url" content="https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/index.html">
<meta property="og:site_name" content="A君的秘密基地">
<meta property="og:description" content="# 实验文件地址 Wireshark Lab: NAT v7.0 NAT Measurement Scenario Question &amp; AnswerWhat is the IP address of the client? The client actually communicates with several different Google servers in order to">
<meta property="og:locale" content="zh_CN">
<meta property="og:image" content="">
<meta property="article:published_time" content="2022-05-14T07:15:13.000Z">
<meta property="article:modified_time" content="2022-05-14T07:16:28.913Z">
<meta property="article:author" content="astralcon">
<meta property="article:tag" content="Wireshark Lab">
<meta name="twitter:card" content="summary">
<meta name="twitter:image" content=""><link rel="shortcut icon" href="/blog/img/avatar.jpg"><link rel="canonical" href="https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/"><link rel="preconnect" href="//cdn.jsdelivr.net"/><link rel="preconnect" href="//busuanzi.ibruce.info"/><link rel="stylesheet" href="/blog/css/index.css"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6/css/all.min.css" media="print" onload="this.media='all'"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.css" media="print" onload="this.media='all'"><script>const GLOBAL_CONFIG = { 
  root: '/blog/',
  algolia: {"appId":"YUB0ZFWBBL","apiKey":"78d0f1fae31a1df3e0cb573725c55558","indexName":"blog","hits":{"per_page":6},"languages":{"input_placeholder":"搜索文章","hits_empty":"找不到您查询的内容：${query}","hits_stats":"找到 ${hits} 条结果，用时 ${time} 毫秒"}},
  localSearch: undefined,
  translate: undefined,
  noticeOutdate: undefined,
  highlight: {"plugin":"highlighjs","highlightCopy":true,"highlightLang":true,"highlightHeightLimit":false},
  copy: {
    success: '复制成功',
    error: '复制错误',
    noSupport: '浏览器不支持'
  },
  relativeDate: {
    homepage: false,
    post: false
  },
  runtime: '天',
  date_suffix: {
    just: '刚刚',
    min: '分钟前',
    hour: '小时前',
    day: '天前',
    month: '个月前'
  },
  copyright: undefined,
  lightbox: 'fancybox',
  Snackbar: undefined,
  source: {
    justifiedGallery: {
      js: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery@2/dist/fjGallery.min.js',
      css: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery@2/dist/fjGallery.min.css'
    }
  },
  isPhotoFigcaption: false,
  islazyload: false,
  isAnchor: false
}</script><script id="config-diff">var GLOBAL_CONFIG_SITE = {
  title: 'Wireshark Lab: NAT v7.0',
  isPost: true,
  isHome: false,
  isHighlightShrink: false,
  isToc: true,
  postUpdate: '2022-05-14 15:16:28'
}</script><noscript><style type="text/css">
  #nav {
    opacity: 1
  }
  .justified-gallery img {
    opacity: 1
  }

  #recent-posts time,
  #post-meta time {
    display: inline !important
  }
</style></noscript><script>(win=>{
    win.saveToLocal = {
      set: function setWithExpiry(key, value, ttl) {
        if (ttl === 0) return
        const now = new Date()
        const expiryDay = ttl * 86400000
        const item = {
          value: value,
          expiry: now.getTime() + expiryDay,
        }
        localStorage.setItem(key, JSON.stringify(item))
      },

      get: function getWithExpiry(key) {
        const itemStr = localStorage.getItem(key)

        if (!itemStr) {
          return undefined
        }
        const item = JSON.parse(itemStr)
        const now = new Date()

        if (now.getTime() > item.expiry) {
          localStorage.removeItem(key)
          return undefined
        }
        return item.value
      }
    }
  
    win.getScript = url => new Promise((resolve, reject) => {
      const script = document.createElement('script')
      script.src = url
      script.async = true
      script.onerror = reject
      script.onload = script.onreadystatechange = function() {
        const loadState = this.readyState
        if (loadState && loadState !== 'loaded' && loadState !== 'complete') return
        script.onload = script.onreadystatechange = null
        resolve()
      }
      document.head.appendChild(script)
    })
  
      win.activateDarkMode = function () {
        document.documentElement.setAttribute('data-theme', 'dark')
        if (document.querySelector('meta[name="theme-color"]') !== null) {
          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#0d0d0d')
        }
      }
      win.activateLightMode = function () {
        document.documentElement.setAttribute('data-theme', 'light')
        if (document.querySelector('meta[name="theme-color"]') !== null) {
          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#ffffff')
        }
      }
      const t = saveToLocal.get('theme')
    
          if (t === 'dark') activateDarkMode()
          else if (t === 'light') activateLightMode()
        
      const asideStatus = saveToLocal.get('aside-status')
      if (asideStatus !== undefined) {
        if (asideStatus === 'hide') {
          document.documentElement.classList.add('hide-aside')
        } else {
          document.documentElement.classList.remove('hide-aside')
        }
      }
    
    const detectApple = () => {
      if(/iPad|iPhone|iPod|Macintosh/.test(navigator.userAgent)){
        document.documentElement.classList.add('apple')
      }
    }
    detectApple()
    })(window)</script><meta name="generator" content="Hexo 6.2.0"></head><body><div id="loading-box"><div class="loading-left-bg"></div><div class="loading-right-bg"></div><div class="spinner-box"><div class="configure-border-1"><div class="configure-core"></div></div><div class="configure-border-2"><div class="configure-core"></div></div><div class="loading-word">加载中...</div></div></div><div id="sidebar"><div id="menu-mask"></div><div id="sidebar-menus"><div class="avatar-img is-center"><img src="/blog/img/avatar.jpg" onerror="onerror=null;src='/img/friend_404.gif'" alt="avatar"/></div><div class="sidebar-site-data site-data is-center"><a href="/blog/archives/"><div class="headline">文章</div><div class="length-num">27</div></a><a href="/blog/tags/"><div class="headline">标签</div><div class="length-num">4</div></a><a href="/blog/categories/"><div class="headline">分类</div><div class="length-num">3</div></a></div><hr/><div class="menus_items"><div class="menus_item"><a class="site-page" href="/blog/"><i class="fa-fw fas fa-home"></i><span> 首頁</span></a></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-folder-open"></i><span> 目录</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/archives/"><i class="fa-fw fas fa-archive"></i><span> 归档</span></a></li><li><a class="site-page child" href="/blog/tags/"><i class="fa-fw fas fa-tags"></i><span> 标签</span></a></li><li><a class="site-page child" href="/blog/categories/"><i class="fa-fw fas fa-folder-open"></i><span> 分类</span></a></li></ul></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-heartbeat"></i><span> 清单</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/game/"><i class="fa-fw fas fa-gamepad"></i><span> 游戏</span></a></li><li><a class="site-page child" href="/blog/book/"><i class="fa-fw fas fa-book"></i><span> 书籍</span></a></li></ul></div><div class="menus_item"><a class="site-page" href="/blog/link/"><i class="fa-fw fas fa-link"></i><span> 友链</span></a></div><div class="menus_item"><a class="site-page" href="/blog/about/"><i class="fa-fw fas fa-heart"></i><span> 关于</span></a></div></div></div></div><div class="post" id="body-wrap"><header class="post-bg" id="page-header" style="background-image: url('')"><nav id="nav"><span id="blog_name"><a id="site-name" href="/blog/">A君的秘密基地</a></span><div id="menus"><div id="search-button"><a class="site-page social-icon search"><i class="fas fa-search fa-fw"></i><span> 搜索</span></a></div><div class="menus_items"><div class="menus_item"><a class="site-page" href="/blog/"><i class="fa-fw fas fa-home"></i><span> 首頁</span></a></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-folder-open"></i><span> 目录</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/archives/"><i class="fa-fw fas fa-archive"></i><span> 归档</span></a></li><li><a class="site-page child" href="/blog/tags/"><i class="fa-fw fas fa-tags"></i><span> 标签</span></a></li><li><a class="site-page child" href="/blog/categories/"><i class="fa-fw fas fa-folder-open"></i><span> 分类</span></a></li></ul></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-heartbeat"></i><span> 清单</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/game/"><i class="fa-fw fas fa-gamepad"></i><span> 游戏</span></a></li><li><a class="site-page child" href="/blog/book/"><i class="fa-fw fas fa-book"></i><span> 书籍</span></a></li></ul></div><div class="menus_item"><a class="site-page" href="/blog/link/"><i class="fa-fw fas fa-link"></i><span> 友链</span></a></div><div class="menus_item"><a class="site-page" href="/blog/about/"><i class="fa-fw fas fa-heart"></i><span> 关于</span></a></div></div><div id="toggle-menu"><a class="site-page"><i class="fas fa-bars fa-fw"></i></a></div></div></nav><div id="post-info"><h1 class="post-title">Wireshark Lab: NAT v7.0</h1><div id="post-meta"><div class="meta-firstline"><span class="post-meta-date"><i class="far fa-calendar-alt fa-fw post-meta-icon"></i><span class="post-meta-label">发表于</span><time class="post-meta-date-created" datetime="2022-05-14T07:15:13.000Z" title="发表于 2022-05-14 15:15:13">2022-05-14</time><span class="post-meta-separator">|</span><i class="fas fa-history fa-fw post-meta-icon"></i><span class="post-meta-label">更新于</span><time class="post-meta-date-updated" datetime="2022-05-14T07:16:28.913Z" title="更新于 2022-05-14 15:16:28">2022-05-14</time></span><span class="post-meta-categories"><span class="post-meta-separator">|</span><i class="fas fa-inbox fa-fw post-meta-icon"></i><a class="post-meta-categories" href="/blog/categories/Computer-Network/">Computer Network</a></span></div><div class="meta-secondline"><span class="post-meta-separator">|</span><span class="post-meta-commentcount"><i class="far fa-comments fa-fw post-meta-icon"></i><span class="post-meta-label">评论数:</span><a href="/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/#post-comment" itemprop="discussionUrl"><span class="valine-comment-count" data-xid="/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/" itemprop="commentCount"></span></a></span></div></div></div></header><main class="layout" id="content-inner"><div id="post"><article class="post-content" id="article-container"><p>﻿# 实验文件地址</p>
<p><a target="_blank" rel="noopener" href="http://www-net.cs.umass.edu/wireshark-labs/Wireshark_NAT_v7.0.pdf">Wireshark Lab: NAT v7.0</a></p>
<h1 id="NAT-Measurement-Scenario"><a href="#NAT-Measurement-Scenario" class="headerlink" title="NAT Measurement Scenario"></a>NAT Measurement Scenario</h1><p><img src="https://img-blog.csdnimg.cn/20201111141945198.png#pic_center" alt="在这里插入图片描述"></p>
<h2 id="Question-amp-Answer"><a href="#Question-amp-Answer" class="headerlink" title="Question &amp; Answer"></a>Question &amp; Answer</h2><h4 id="What-is-the-IP-address-of-the-client"><a href="#What-is-the-IP-address-of-the-client" class="headerlink" title="What is the IP address of the client?"></a>What is the IP address of the client?</h4><p><img src="https://img-blog.csdnimg.cn/20201111142049504.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h4 id="The-client-actually-communicates-with-several-different-Google-servers-in-order-to-implement-“safe-browsing-”-See-extra-credit-section-at-the-end-of-this-lab-The-main-Google-server-that-will-serve-up-the-main-Google-web-page-has-IP-address-64-233-169-104-In-order-to-display-only-those-frames-containing-HTTP-messages-that-are-sent-to-x2F-from-this-Google-server-enter-the-expression-“http-amp-amp-ip-addr-x3D-x3D-64-233-169-104”-without-quotes-into-the-Filter-field-in-Wireshark"><a href="#The-client-actually-communicates-with-several-different-Google-servers-in-order-to-implement-“safe-browsing-”-See-extra-credit-section-at-the-end-of-this-lab-The-main-Google-server-that-will-serve-up-the-main-Google-web-page-has-IP-address-64-233-169-104-In-order-to-display-only-those-frames-containing-HTTP-messages-that-are-sent-to-x2F-from-this-Google-server-enter-the-expression-“http-amp-amp-ip-addr-x3D-x3D-64-233-169-104”-without-quotes-into-the-Filter-field-in-Wireshark" class="headerlink" title="The client actually communicates with several different Google servers in order to implement “safe browsing.” (See extra credit section at the end of this lab). The main Google server that will serve up the main Google web page has IP address 64.233.169.104. In order to display only those frames containing HTTP messages that are sent to&#x2F;from this Google, server, enter the expression “http &amp;&amp; ip.addr &#x3D;&#x3D; 64.233.169.104” (without quotes) into the Filter: field in Wireshark ."></a>The client actually communicates with several different Google servers in order to implement “safe browsing.” (See extra credit section at the end of this lab). The main Google server that will serve up the main Google web page has IP address 64.233.169.104. In order to display only those frames containing HTTP messages that are sent to&#x2F;from this Google, server, enter the expression “http &amp;&amp; ip.addr &#x3D;&#x3D; 64.233.169.104” (without quotes) into the Filter: field in Wireshark .</h4><p><img src="https://img-blog.csdnimg.cn/20201111142159149.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h4 id="Consider-now-the-HTTP-GET-sent-from-the-client-to-the-Google-server-whose-IP-address-is-IP-address-64-233-169-104-at-time-7-109267-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-GET"><a href="#Consider-now-the-HTTP-GET-sent-from-the-client-to-the-Google-server-whose-IP-address-is-IP-address-64-233-169-104-at-time-7-109267-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-GET" class="headerlink" title="Consider now the HTTP GET sent from the client to the Google server (whose IP address is IP address 64.233.169.104) at time 7.109267. What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP GET?"></a>Consider now the HTTP GET sent from the client to the Google server (whose IP address is IP address 64.233.169.104) at time 7.109267. What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP GET?</h4><p><img src="https://img-blog.csdnimg.cn/2020111114240279.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h4 id="At-what-time4-is-the-corresponding-200-OK-HTTP-message-received-from-the-Google-server-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-200-OK-message"><a href="#At-what-time4-is-the-corresponding-200-OK-HTTP-message-received-from-the-Google-server-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-200-OK-message" class="headerlink" title="At what time4 is the corresponding 200 OK HTTP message received from the Google server? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP 200 OK message?"></a>At what time4 is the corresponding 200 OK HTTP message received from the Google server? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP 200 OK message?</h4><p><img src="https://img-blog.csdnimg.cn/20201111142551562.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h4 id="Recall-that-before-a-GET-command-can-be-sent-to-an-HTTP-server-TCP-must-first-set-up-a-connection-using-the-three-way-SYN-x2F-ACK-handshake-At-what-time-is-the-client-to-server-TCP-SYN-segment-sent-that-sets-up-the-connection-used-by-the-GET-sent-at-time-7-109267-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-for-the-TCP-SYN-segment-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-of-the-ACK-sent-in-response-to-the-SYN-At-what-time-is-this-ACK-received-at-the-client-Note-to-find-these-segments-you-will-need-to-clear-the-Filter-expression-you-entered-above-in-step-2-If-you-enter-the-filter-“tcp”-only-TCP-segments-will-be-displayed-by-Wireshark"><a href="#Recall-that-before-a-GET-command-can-be-sent-to-an-HTTP-server-TCP-must-first-set-up-a-connection-using-the-three-way-SYN-x2F-ACK-handshake-At-what-time-is-the-client-to-server-TCP-SYN-segment-sent-that-sets-up-the-connection-used-by-the-GET-sent-at-time-7-109267-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-for-the-TCP-SYN-segment-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-of-the-ACK-sent-in-response-to-the-SYN-At-what-time-is-this-ACK-received-at-the-client-Note-to-find-these-segments-you-will-need-to-clear-the-Filter-expression-you-entered-above-in-step-2-If-you-enter-the-filter-“tcp”-only-TCP-segments-will-be-displayed-by-Wireshark" class="headerlink" title="Recall that before a GET command can be sent to an HTTP server, TCP must first set up a connection using the three-way SYN&#x2F;ACK handshake. At what time is the client-to-server TCP SYN segment sent that sets up the connection used by the GET sent at time 7.109267? What are the source and destination IP addresses and source and destination ports for the TCP SYN segment? What are the source and destination IP addresses and source and destination ports of the ACK sent in response to the SYN. At what time is this ACK received at the client? (Note: to find these segments you will need to clear the Filter expression you entered above in step 2. If you enter the filter “tcp”, only TCP segments will be displayed by Wireshark)."></a>Recall that before a GET command can be sent to an HTTP server, TCP must first set up a connection using the three-way SYN&#x2F;ACK handshake. At what time is the client-to-server TCP SYN segment sent that sets up the connection used by the GET sent at time 7.109267? What are the source and destination IP addresses and source and destination ports for the TCP SYN segment? What are the source and destination IP addresses and source and destination ports of the ACK sent in response to the SYN. At what time is this ACK received at the client? (Note: to find these segments you will need to clear the Filter expression you entered above in step 2. If you enter the filter “tcp”, only TCP segments will be displayed by Wireshark).</h4><p><img src="https://img-blog.csdnimg.cn/20201111144215161.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<p><img src="https://img-blog.csdnimg.cn/20201111144001926.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br><img src="https://img-blog.csdnimg.cn/2020111114410623.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h2 id="Question-amp-Answer-1"><a href="#Question-amp-Answer-1" class="headerlink" title="Question &amp; Answer"></a>Question &amp; Answer</h2><p><img src="https://img-blog.csdnimg.cn/20201111144400631.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h4 id="In-the-NAT-ISP-side-trace-file-find-the-HTTP-GET-message-was-sent-from-the-client-to-the-Google-server-at-time-7-109267-where-t-x3D-7-109267-is-time-at-which-this-was-sent-as-recorded-in-the-NAT-home-side-trace-file-At-what-time-does-this-message-appear-in-the-NAT-ISP-side-trace-file-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-GET-as-recording-in-the-NAT-ISP-side-trace-file-Which-of-these-fields-are-the-same-and-which-are-different-than-in-your-answer-to-question-3-above"><a href="#In-the-NAT-ISP-side-trace-file-find-the-HTTP-GET-message-was-sent-from-the-client-to-the-Google-server-at-time-7-109267-where-t-x3D-7-109267-is-time-at-which-this-was-sent-as-recorded-in-the-NAT-home-side-trace-file-At-what-time-does-this-message-appear-in-the-NAT-ISP-side-trace-file-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-GET-as-recording-in-the-NAT-ISP-side-trace-file-Which-of-these-fields-are-the-same-and-which-are-different-than-in-your-answer-to-question-3-above" class="headerlink" title="In the NAT_ISP_side trace file, find the HTTP GET message was sent from the client to the Google server at time 7.109267 (where t&#x3D;7.109267 is time at which this was sent as recorded in the NAT_home_side trace file). At what time does this message appear in the NAT_ISP_side trace file? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP GET (as recording in the NAT_ISP_side trace file)? Which of these fields are the same, and which are different, than in your answer to question 3 above?"></a>In the NAT_ISP_side trace file, find the HTTP GET message was sent from the client to the Google server at time 7.109267 (where t&#x3D;7.109267 is time at which this was sent as recorded in the NAT_home_side trace file). At what time does this message appear in the NAT_ISP_side trace file? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP GET (as recording in the NAT_ISP_side trace file)? Which of these fields are the same, and which are different, than in your answer to question 3 above?</h4><p><img src="https://img-blog.csdnimg.cn/2020111114570380.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br></pre></td><td class="code"><pre><span class="line">相同：</span><br><span class="line">Src Port &amp; Dst Port </span><br><span class="line"></span><br><span class="line">不同：</span><br><span class="line">Source IP &amp; Desination IP</span><br></pre></td></tr></table></figure>

<h4 id="Are-any-fields-in-the-HTTP-GET-message-changed-Which-of-the-following-fields-in-the-IP-datagram-carrying-the-HTTP-GET-are-changed-Version-Header-Length-Flags-Checksum-If-any-of-these-fields-have-changed-give-a-reason-in-one-sentence-stating-why-this-field-needed-to-change"><a href="#Are-any-fields-in-the-HTTP-GET-message-changed-Which-of-the-following-fields-in-the-IP-datagram-carrying-the-HTTP-GET-are-changed-Version-Header-Length-Flags-Checksum-If-any-of-these-fields-have-changed-give-a-reason-in-one-sentence-stating-why-this-field-needed-to-change" class="headerlink" title="Are any fields in the HTTP GET message changed? Which of the following fields in the IP datagram carrying the HTTP GET are changed: Version, Header Length, Flags, Checksum. If any of these fields have changed, give a reason (in one sentence) stating why this field needed to change."></a>Are any fields in the HTTP GET message changed? Which of the following fields in the IP datagram carrying the HTTP GET are changed: Version, Header Length, Flags, Checksum. If any of these fields have changed, give a reason (in one sentence) stating why this field needed to change.</h4><figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br></pre></td><td class="code"><pre><span class="line">The all fields <span class="keyword">in</span> the HTTP GET message won<span class="string">&#x27;t change.</span></span><br><span class="line"><span class="string">NAT只是将本地想和外界通信的主机的本地地址转换为全球IP地址，相当于给一个人取了另外一个名字，这个人是不会改变的。</span></span><br></pre></td></tr></table></figure>

<h4 id="In-the-NAT-ISP-side-trace-file-at-what-time-is-the-first-200-OK-HTTP-message-received-from-the-Google-server-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-200-OK-message-Which-of-these-fields-are-the-same-and-which-are-different-than-your-answer-to-question-4-above"><a href="#In-the-NAT-ISP-side-trace-file-at-what-time-is-the-first-200-OK-HTTP-message-received-from-the-Google-server-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-200-OK-message-Which-of-these-fields-are-the-same-and-which-are-different-than-your-answer-to-question-4-above" class="headerlink" title="In the NAT_ISP_side trace file, at what time is the first 200 OK HTTP message received from the Google server? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP 200 OK message? Which of these fields are the same, and which are different than your answer to question 4 above?"></a>In the NAT_ISP_side trace file, at what time is the first 200 OK HTTP message received from the Google server? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP 200 OK message? Which of these fields are the same, and which are different than your answer to question 4 above?</h4><p><img src="https://img-blog.csdnimg.cn/20201111151653429.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br></pre></td><td class="code"><pre><span class="line">相同：</span><br><span class="line">Source IP </span><br><span class="line">Src Port</span><br><span class="line">Dst Port</span><br><span class="line"></span><br><span class="line">不同：</span><br><span class="line">Destination IP</span><br></pre></td></tr></table></figure>

<h4 id="In-the-NAT-ISP-side-trace-file-at-what-time-were-the-client-to-server-TCP-SYN-segment-and-the-server-to-client-TCP-ACK-segment-corresponding-to-the-segments-in-question-5-above-captured-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-for-these-two-segments-Which-of-these-fields-are-the-same-and-which-are-different-than-your-answer-to-question-5-above"><a href="#In-the-NAT-ISP-side-trace-file-at-what-time-were-the-client-to-server-TCP-SYN-segment-and-the-server-to-client-TCP-ACK-segment-corresponding-to-the-segments-in-question-5-above-captured-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-for-these-two-segments-Which-of-these-fields-are-the-same-and-which-are-different-than-your-answer-to-question-5-above" class="headerlink" title="In the NAT_ISP_side trace file, at what time were the client-to-server TCP SYN segment and the server-to-client TCP ACK segment corresponding to the segments in question 5 above captured? What are the source and destination IP addresses and source and destination ports for these two segments? Which of these fields are the same, and which are different than your answer to question 5 above?"></a>In the NAT_ISP_side trace file, at what time were the client-to-server TCP SYN segment and the server-to-client TCP ACK segment corresponding to the segments in question 5 above captured? What are the source and destination IP addresses and source and destination ports for these two segments? Which of these fields are the same, and which are different than your answer to question 5 above?</h4><p><img src="https://img-blog.csdnimg.cn/20201111152651373.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br></pre></td><td class="code"><pre><span class="line">相同：</span><br><span class="line">Src Post</span><br><span class="line">Dst Port</span><br><span class="line">Destination IP</span><br><span class="line"></span><br><span class="line">不同：</span><br><span class="line">Source IP</span><br></pre></td></tr></table></figure>

<p><img src="https://img-blog.csdnimg.cn/20201111152827805.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br></pre></td><td class="code"><pre><span class="line">相同：</span><br><span class="line">Src Post</span><br><span class="line">Dst Port</span><br><span class="line">Source IP</span><br><span class="line"></span><br><span class="line">不同：</span><br><span class="line">Destination IP</span><br></pre></td></tr></table></figure>

<h2 id="Question-amp-Answer-2"><a href="#Question-amp-Answer-2" class="headerlink" title="Question &amp; Answer"></a>Question &amp; Answer</h2><p><img src="https://img-blog.csdnimg.cn/20201111153258373.png#pic_center" alt="在这里插入图片描述"></p>
<h4 id="Using-your-answers-to-1-8-above-fill-in-the-NAT-translation-table-entries-for-HTTP-connection-considered-in-questions-1-8-above"><a href="#Using-your-answers-to-1-8-above-fill-in-the-NAT-translation-table-entries-for-HTTP-connection-considered-in-questions-1-8-above" class="headerlink" title="Using your answers to 1-8 above, fill in the NAT translation table entries for HTTP connection considered in questions 1-8 above."></a>Using your answers to 1-8 above, fill in the NAT translation table entries for HTTP connection considered in questions 1-8 above.</h4><table>
<thead>
<tr>
<th>NAT转换表</th>
<th></th>
</tr>
</thead>
<tbody><tr>
<td>WAN端</td>
<td>LAN端</td>
</tr>
<tr>
<td>64.233.169.104，80</td>
<td>74.125.106.31， 80</td>
</tr>
<tr>
<td>64.233.169.104，80</td>
<td>74.125.91.113， 80</td>
</tr>
<tr>
<td>192.168.1.100，4331</td>
<td>71.192.34.104，4330</td>
</tr>
<tr>
<td>192.168.1.100，4331</td>
<td>71.192.34.104，4331</td>
</tr>
<tr>
<td>192.168.1.100，4331</td>
<td>71.192.34.104，4335</td>
</tr>
<tr>
<td>192.168.1.100，4331</td>
<td>71.192.34.104，4336</td>
</tr>
<tr>
<td>192.168.1.100，4331</td>
<td>71.192.34.104，4337</td>
</tr>
<tr>
<td>192.168.1.100，4331</td>
<td>71.192.34.104，4338</td>
</tr>
</tbody></table>
</article><div class="post-copyright"><div class="post-copyright__author"><span class="post-copyright-meta">文章作者: </span><span class="post-copyright-info"><a href="https://astralcon.gitee.io/blog">astralcon</a></span></div><div class="post-copyright__type"><span class="post-copyright-meta">文章链接: </span><span class="post-copyright-info"><a href="https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/">https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/</a></span></div><div class="post-copyright__notice"><span class="post-copyright-meta">版权声明: </span><span class="post-copyright-info">本博客所有文章除特别声明外，均采用 <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank">CC BY-NC-SA 4.0</a> 许可协议。转载请注明来自 <a href="https://astralcon.gitee.io/blog" target="_blank">A君的秘密基地</a>！</span></div></div><div class="tag_share"><div class="post-meta__tag-list"><a class="post-meta__tags" href="/blog/tags/Wireshark-Lab/">Wireshark Lab</a></div><div class="post_share"><div class="social-share" data-image="" data-sites="facebook,twitter,wechat,weibo,qq"></div><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/social-share.js/dist/css/share.min.css" media="print" onload="this.media='all'"><script src="https://cdn.jsdelivr.net/gh/overtrue/share.js@master/dist/js/social-share.min.js" defer></script></div></div><div class="post-reward"><div class="reward-button"><i class="fas fa-qrcode"></i> 打赏</div><div class="reward-main"><ul class="reward-all"><li class="reward-item"><a href="/blog/img/wechat.jpg" target="_blank"><img class="post-qr-code-img" src="/blog/img/wechat.jpg" alt="微信"/></a><div class="post-qr-code-desc">微信</div></li><li class="reward-item"><a href="/blog/img/alipay.jpg" target="_blank"><img class="post-qr-code-img" src="/blog/img/alipay.jpg" alt="支付宝"/></a><div class="post-qr-code-desc">支付宝</div></li></ul></div></div><nav class="pagination-post" id="pagination"><div class="prev-post pull-left"><a href="/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/"><img class="prev-cover" src="" onerror="onerror=null;src='/blog/img/404.jpg'" alt="cover of previous post"><div class="pagination-info"><div class="label">上一篇</div><div class="prev_info">Wireshark Lab: ICMP v7.0</div></div></a></div><div class="next-post pull-right"><a href="/blog/2022/05/14/Wireshark-Lab-IP-v7-0/"><img class="next-cover" src="" onerror="onerror=null;src='/blog/img/404.jpg'" alt="cover of next post"><div class="pagination-info"><div class="label">下一篇</div><div class="next_info">Wireshark Lab: IP v7.0</div></div></a></div></nav><div class="relatedPosts"><div class="headline"><i class="fas fa-thumbs-up fa-fw"></i><span>相关推荐</span></div><div class="relatedPosts-list"><div><a href="/blog/2022/05/14/Wireshark-Lab-DHCP-v7-0/" title="Wireshark Lab: DHCP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: DHCP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-DNS-v7-0/" title="Wireshark Lab: DNS v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: DNS v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-HTTP-v7-0/" title="Wireshark Lab: HTTP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: HTTP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-Ethernet-and-ARP-v7-0/" title="Wireshark Lab: Ethernet and ARP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: Ethernet and ARP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/" title="Wireshark Lab: ICMP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: ICMP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-IP-v7-0/" title="Wireshark Lab: IP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: IP v7.0</div></div></a></div></div></div><hr/><div id="post-comment"><div class="comment-head"><div class="comment-headline"><i class="fas fa-comments fa-fw"></i><span> 评论</span></div><div id="comment-switch"><span class="first-comment">Valine</span><span class="switch-btn"></span><span class="second-comment">Disqus</span></div></div><div class="comment-wrap"><div><div class="vcomment" id="vcomment"></div></div><div><div id="disqus_thread"></div></div></div></div></div><div class="aside-content" id="aside-content"><div class="card-widget card-info"><div class="is-center"><div class="avatar-img"><img src="/blog/img/avatar.jpg" onerror="this.onerror=null;this.src='/blog/img/friend_404.gif'" alt="avatar"/></div><div class="author-info__name">astralcon</div><div class="author-info__description">slow is fast.</div></div><div class="card-info-data site-data is-center"><a href="/blog/archives/"><div class="headline">文章</div><div class="length-num">27</div></a><a href="/blog/tags/"><div class="headline">标签</div><div class="length-num">4</div></a><a href="/blog/categories/"><div class="headline">分类</div><div class="length-num">3</div></a></div><div class="card-info-social-icons is-center"><a class="social-icon" href="https://github.com/astralcon" target="_blank" title="Github"><i class="fab fa-github"></i></a><a class="social-icon" href="mailto:a842181471@qq.com.com" target="_blank" title="Email"><i class="fas fa-envelope"></i></a></div></div><div class="card-widget card-announcement"><div class="item-headline"><i class="fas fa-bullhorn fa-shake"></i><span>公告</span></div><div class="announcement_content">朝九晚五，健康生活！</div></div><div class="sticky_layout"><div class="card-widget" id="card-toc"><div class="item-headline"><i class="fas fa-stream"></i><span>目录</span><span class="toc-percentage"></span></div><div class="toc-content"><ol class="toc"><li class="toc-item toc-level-1"><a class="toc-link" href="#NAT-Measurement-Scenario"><span class="toc-number">1.</span> <span class="toc-text">NAT Measurement Scenario</span></a><ol class="toc-child"><li class="toc-item toc-level-2"><a class="toc-link" href="#Question-amp-Answer"><span class="toc-number">1.1.</span> <span class="toc-text">Question &amp; Answer</span></a><ol class="toc-child"><li class="toc-item toc-level-4"><a class="toc-link" href="#What-is-the-IP-address-of-the-client"><span class="toc-number">1.1.0.1.</span> <span class="toc-text">What is the IP address of the client?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#The-client-actually-communicates-with-several-different-Google-servers-in-order-to-implement-%E2%80%9Csafe-browsing-%E2%80%9D-See-extra-credit-section-at-the-end-of-this-lab-The-main-Google-server-that-will-serve-up-the-main-Google-web-page-has-IP-address-64-233-169-104-In-order-to-display-only-those-frames-containing-HTTP-messages-that-are-sent-to-x2F-from-this-Google-server-enter-the-expression-%E2%80%9Chttp-amp-amp-ip-addr-x3D-x3D-64-233-169-104%E2%80%9D-without-quotes-into-the-Filter-field-in-Wireshark"><span class="toc-number">1.1.0.2.</span> <span class="toc-text">The client actually communicates with several different Google servers in order to implement “safe browsing.” (See extra credit section at the end of this lab). The main Google server that will serve up the main Google web page has IP address 64.233.169.104. In order to display only those frames containing HTTP messages that are sent to&#x2F;from this Google, server, enter the expression “http &amp;&amp; ip.addr &#x3D;&#x3D; 64.233.169.104” (without quotes) into the Filter: field in Wireshark .</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Consider-now-the-HTTP-GET-sent-from-the-client-to-the-Google-server-whose-IP-address-is-IP-address-64-233-169-104-at-time-7-109267-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-GET"><span class="toc-number">1.1.0.3.</span> <span class="toc-text">Consider now the HTTP GET sent from the client to the Google server (whose IP address is IP address 64.233.169.104) at time 7.109267. What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP GET?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#At-what-time4-is-the-corresponding-200-OK-HTTP-message-received-from-the-Google-server-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-200-OK-message"><span class="toc-number">1.1.0.4.</span> <span class="toc-text">At what time4 is the corresponding 200 OK HTTP message received from the Google server? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP 200 OK message?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Recall-that-before-a-GET-command-can-be-sent-to-an-HTTP-server-TCP-must-first-set-up-a-connection-using-the-three-way-SYN-x2F-ACK-handshake-At-what-time-is-the-client-to-server-TCP-SYN-segment-sent-that-sets-up-the-connection-used-by-the-GET-sent-at-time-7-109267-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-for-the-TCP-SYN-segment-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-of-the-ACK-sent-in-response-to-the-SYN-At-what-time-is-this-ACK-received-at-the-client-Note-to-find-these-segments-you-will-need-to-clear-the-Filter-expression-you-entered-above-in-step-2-If-you-enter-the-filter-%E2%80%9Ctcp%E2%80%9D-only-TCP-segments-will-be-displayed-by-Wireshark"><span class="toc-number">1.1.0.5.</span> <span class="toc-text">Recall that before a GET command can be sent to an HTTP server, TCP must first set up a connection using the three-way SYN&#x2F;ACK handshake. At what time is the client-to-server TCP SYN segment sent that sets up the connection used by the GET sent at time 7.109267? What are the source and destination IP addresses and source and destination ports for the TCP SYN segment? What are the source and destination IP addresses and source and destination ports of the ACK sent in response to the SYN. At what time is this ACK received at the client? (Note: to find these segments you will need to clear the Filter expression you entered above in step 2. If you enter the filter “tcp”, only TCP segments will be displayed by Wireshark).</span></a></li></ol></li></ol></li><li class="toc-item toc-level-2"><a class="toc-link" href="#Question-amp-Answer-1"><span class="toc-number">1.2.</span> <span class="toc-text">Question &amp; Answer</span></a><ol class="toc-child"><li class="toc-item toc-level-4"><a class="toc-link" href="#In-the-NAT-ISP-side-trace-file-find-the-HTTP-GET-message-was-sent-from-the-client-to-the-Google-server-at-time-7-109267-where-t-x3D-7-109267-is-time-at-which-this-was-sent-as-recorded-in-the-NAT-home-side-trace-file-At-what-time-does-this-message-appear-in-the-NAT-ISP-side-trace-file-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-GET-as-recording-in-the-NAT-ISP-side-trace-file-Which-of-these-fields-are-the-same-and-which-are-different-than-in-your-answer-to-question-3-above"><span class="toc-number">1.2.0.1.</span> <span class="toc-text">In the NAT_ISP_side trace file, find the HTTP GET message was sent from the client to the Google server at time 7.109267 (where t&#x3D;7.109267 is time at which this was sent as recorded in the NAT_home_side trace file). At what time does this message appear in the NAT_ISP_side trace file? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP GET (as recording in the NAT_ISP_side trace file)? Which of these fields are the same, and which are different, than in your answer to question 3 above?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Are-any-fields-in-the-HTTP-GET-message-changed-Which-of-the-following-fields-in-the-IP-datagram-carrying-the-HTTP-GET-are-changed-Version-Header-Length-Flags-Checksum-If-any-of-these-fields-have-changed-give-a-reason-in-one-sentence-stating-why-this-field-needed-to-change"><span class="toc-number">1.2.0.2.</span> <span class="toc-text">Are any fields in the HTTP GET message changed? Which of the following fields in the IP datagram carrying the HTTP GET are changed: Version, Header Length, Flags, Checksum. If any of these fields have changed, give a reason (in one sentence) stating why this field needed to change.</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#In-the-NAT-ISP-side-trace-file-at-what-time-is-the-first-200-OK-HTTP-message-received-from-the-Google-server-What-are-the-source-and-destination-IP-addresses-and-TCP-source-and-destination-ports-on-the-IP-datagram-carrying-this-HTTP-200-OK-message-Which-of-these-fields-are-the-same-and-which-are-different-than-your-answer-to-question-4-above"><span class="toc-number">1.2.0.3.</span> <span class="toc-text">In the NAT_ISP_side trace file, at what time is the first 200 OK HTTP message received from the Google server? What are the source and destination IP addresses and TCP source and destination ports on the IP datagram carrying this HTTP 200 OK message? Which of these fields are the same, and which are different than your answer to question 4 above?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#In-the-NAT-ISP-side-trace-file-at-what-time-were-the-client-to-server-TCP-SYN-segment-and-the-server-to-client-TCP-ACK-segment-corresponding-to-the-segments-in-question-5-above-captured-What-are-the-source-and-destination-IP-addresses-and-source-and-destination-ports-for-these-two-segments-Which-of-these-fields-are-the-same-and-which-are-different-than-your-answer-to-question-5-above"><span class="toc-number">1.2.0.4.</span> <span class="toc-text">In the NAT_ISP_side trace file, at what time were the client-to-server TCP SYN segment and the server-to-client TCP ACK segment corresponding to the segments in question 5 above captured? What are the source and destination IP addresses and source and destination ports for these two segments? Which of these fields are the same, and which are different than your answer to question 5 above?</span></a></li></ol></li></ol></li><li class="toc-item toc-level-2"><a class="toc-link" href="#Question-amp-Answer-2"><span class="toc-number">1.3.</span> <span class="toc-text">Question &amp; Answer</span></a><ol class="toc-child"><li class="toc-item toc-level-4"><a class="toc-link" href="#Using-your-answers-to-1-8-above-fill-in-the-NAT-translation-table-entries-for-HTTP-connection-considered-in-questions-1-8-above"><span class="toc-number">1.3.0.1.</span> <span class="toc-text">Using your answers to 1-8 above, fill in the NAT translation table entries for HTTP connection considered in questions 1-8 above.</span></a></li></ol></li></ol></li></ol></li></ol></div></div><div class="card-widget card-recent-post"><div class="item-headline"><i class="fas fa-history"></i><span>最新文章</span></div><div class="aside-list"><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/17/%E3%80%8A%E7%AE%97%E6%B3%95%E8%AE%BE%E8%AE%A1%E6%89%8B%E5%86%8C%E3%80%8B%E9%9D%A2%E8%AF%95%E9%A2%98%EF%BC%9AChapter-1/" title="《算法设计手册》面试题：Chapter 1">《算法设计手册》面试题：Chapter 1</a><time datetime="2022-05-17T07:35:05.000Z" title="发表于 2022-05-17 15:35:05">2022-05-17</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-DHCP-v7-0/" title="Wireshark Lab: DHCP v7.0">Wireshark Lab: DHCP v7.0</a><time datetime="2022-05-14T07:19:53.000Z" title="发表于 2022-05-14 15:19:53">2022-05-14</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-Ethernet-and-ARP-v7-0/" title="Wireshark Lab: Ethernet and ARP v7.0">Wireshark Lab: Ethernet and ARP v7.0</a><time datetime="2022-05-14T07:18:10.000Z" title="发表于 2022-05-14 15:18:10">2022-05-14</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/" title="Wireshark Lab: ICMP v7.0">Wireshark Lab: ICMP v7.0</a><time datetime="2022-05-14T07:16:41.000Z" title="发表于 2022-05-14 15:16:41">2022-05-14</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/" title="Wireshark Lab: NAT v7.0">Wireshark Lab: NAT v7.0</a><time datetime="2022-05-14T07:15:13.000Z" title="发表于 2022-05-14 15:15:13">2022-05-14</time></div></div></div></div></div></div></main><footer id="footer"><div id="footer-wrap"><div class="copyright">&copy;2022 By astralcon</div><div class="framework-info"><span>框架 </span><a target="_blank" rel="noopener" href="https://hexo.io">Hexo</a><span class="footer-separator">|</span><span>主题 </span><a target="_blank" rel="noopener" href="https://github.com/jerryc127/hexo-theme-butterfly">Butterfly</a></div></div></footer></div><div id="rightside"><div id="rightside-config-hide"><button id="readmode" type="button" title="阅读模式"><i class="fas fa-book-open"></i></button><button id="darkmode" type="button" title="浅色和深色模式转换"><i class="fas fa-adjust"></i></button><button id="hide-aside-btn" type="button" title="单栏和双栏切换"><i class="fas fa-arrows-alt-h"></i></button></div><div id="rightside-config-show"><button id="rightside_config" type="button" title="设置"><i class="fas fa-cog fa-spin"></i></button><button class="close" id="mobile-toc-button" type="button" title="目录"><i class="fas fa-list-ul"></i></button><a id="to_comment" href="#post-comment" title="直达评论"><i class="fas fa-comments"></i></a><button id="go-up" type="button" title="回到顶部"><i class="fas fa-arrow-up"></i></button></div></div><div id="algolia-search"><div class="search-dialog"><nav class="search-nav"><span class="search-dialog-title">搜索</span><button class="search-close-button"><i class="fas fa-times"></i></button></nav><div class="search-wrap"><div id="algolia-search-input"></div><hr/><div id="algolia-search-results"><div id="algolia-hits"></div><div id="algolia-pagination"></div><div id="algolia-info"><div class="algolia-stats"></div><div class="algolia-poweredBy"></div></div></div></div></div><div id="search-mask"></div></div><div><script src="/blog/js/utils.js"></script><script src="/blog/js/main.js"></script><script src="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.umd.js"></script><script src="https://cdn.jsdelivr.net/npm/algoliasearch@4/dist/algoliasearch-lite.umd.js"></script><script src="https://cdn.jsdelivr.net/npm/instantsearch.js@4/dist/instantsearch.production.min.js"></script><script src="/blog/js/search/algolia.js"></script><script>var preloader = {
  endLoading: () => {
    document.body.style.overflow = 'auto';
    document.getElementById('loading-box').classList.add("loaded")
  },
  initLoading: () => {
    document.body.style.overflow = '';
    document.getElementById('loading-box').classList.remove("loaded")

  }
}
window.addEventListener('load',preloader.endLoading())</script><div class="js-pjax"><script>function loadValine () {
  function initValine () {
    const valine = new Valine(Object.assign({
      el: '#vcomment',
      appId: 'Uh3CYGE2t1Eaz4KoTkyVQv1N-gzGzoHsz',
      appKey: '1Gdg4rGlmT4Dcfv7oNiCH1q3',
      avatar: 'monsterid',
      serverURLs: '',
      emojiMaps: "",
      path: window.location.pathname,
      visitor: false
    }, null))
  }

  if (typeof Valine === 'function') initValine() 
  else getScript('https://cdn.jsdelivr.net/npm/valine/dist/Valine.min.js').then(initValine)
}

if ('Valine' === 'Valine' || !false) {
  if (false) btf.loadComment(document.getElementById('vcomment'),loadValine)
  else setTimeout(loadValine, 0)
} else {
  function loadOtherComment () {
    loadValine()
  }
}</script><script>function loadDisqus () {
  var disqus_config = function () {
    this.page.url = 'https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/'
    this.page.identifier = '2022/05/14/Wireshark-Lab-NAT-v7-0/'
    this.page.title = 'Wireshark Lab: NAT v7.0'
  };

  window.disqusReset = () => {
    DISQUS.reset({
      reload: true,
      config: disqus_config
    })
  }

  if (window.DISQUS) disqusReset()
  else {
    (function() { 
      var d = document, s = d.createElement('script');
      s.src = 'https://.disqus.com/embed.js';
      s.setAttribute('data-timestamp', +new Date());
      (d.head || d.body).appendChild(s);
    })();
  }
}

if ('Valine' === 'Disqus' || !false) {
  if (false) btf.loadComment(document.getElementById('disqus_thread'), loadDisqus)
  else loadDisqus()
} else {
  function loadOtherComment () {
    loadDisqus()
  }
}
</script></div><script async data-pjax src="//busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js"></script></div><script src="/blog/live2dw/lib/L2Dwidget.min.js?094cbace49a39548bed64abff5988b05"></script><script>L2Dwidget.init({"log":false,"pluginJsPath":"lib/","pluginModelPath":"assets/","pluginRootPath":"live2dw/","tagMode":false});</script></body></html>